Application Security Engineer

Crypto Pro Network; United States; Hybrid; USD 120,000 - 154,440; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Employer-paid premiums for employees &

HSA/FSAs/Dep Care FSA

401(k) and commuter benefits

Family leave and education assistance

Job summary

Figure in the United States is seeking a security leader to architect and implement end-to-end security solutions, collaborate with DevOps, conduct threat modeling, and mentor engineers. The role focuses on building robust defenses while enabling fast, secure software delivery.

You will drive incident response, manage vulnerability programs, automate security gates in the SDLC, and ensure adherence to company security policies and procedures.

Qualifications

• Experience building and running vulnerability management programs.
• they should be able to lead and coordinate remediation efforts.
• Knowledge of threat modeling and security reviews during design.
• Experience mentoring engineers on security best practices.
• Strong incident response and on-call experience.

Responsibilities

• Architect and implement end-to-end security solutions.
• Collaborate with DevOps to integrate security into CI/CD pipelines.
• Lead cross-team initiatives to improve security posture.
• Mentor engineers on security best practices.
• Participate in incident response and post-incident reviews.

Skills

Security leadership

Threat modeling

CI/CD security

Incident response

Security reviews

Tools

Penetration testing

Remediation tracking

Job description

About Figure

Figure (NASDAQ: FIGR) is transforming capital markets through blockchain. We’re proving that blockchain isn’t just theory – it’s powering real products used by hundreds of thousands of consumers and institutions.

By combining blockchain’s transparency and efficiency with AI‑driven automation, we’ve reimagined how loans are originated, funded, and traded in secondary markets. From faster processing times to lower costs and reduced bias, our technology is helping borrowers, investors, and financial institutions achieve better outcomes.

Together with our 170+ partners, we’ve originated over $22 billion in home equity loans (HELOCs) on our blockchain‑native platform, making Figure the largest non‑bank provider of home equity financing in the U.S. Figure’s ecosystem also includes YLDS, an SEC‑registered yield‑bearing stablecoin that operates as a tokenized money‑market fund, and several other products and platforms that are reshaping consumer finance and capital markets.

What You’ll Do

• Architect, design, and implement end-to-end security solutions, including firewalls, intrusion detection, encryption protocols, security event management, and cloud security controls.
• Collaborate with DevOps to integrate security into CI/CD pipelines, ensuring automation and repeatability of secure deployments.
• Conduct regular security assessments, threat modeling, and architecture reviews to identify risks and design mitigations.
• Lead cross‑team initiatives that significantly improve our security posture while balancing speed and innovation.
• Mentor engineers on security best practices and build a culture of security by design.
• Actively participate in incident response, on‑call rotations, and post‑incident reviews to continuously improve defenses.

What We Look For

• Improve and run Figure’s vulnerability management program including triage, prioritization, tracking remediation, and reporting on risk reduction over time.
• Collaborate with DevOps to integrate security gates at various points throughout the software development lifecycle, ensuring automation and repeatability of secure deployments.
• Manage third‑party penetration tests, including scoping, vendor coordination, and tracking remediation of findings.
• Automate sources of toil, such as routine patching or dependency upgrades.
• Conduct threat modeling and security reviews for new features and services, partnering with engineering teams early in the design process.
• Adhere to all company security policies and data handling procedures.
• Complete mandatory security awareness training within required timeframes.
• Promptly report any suspected security incidents or suspicious activity to the Security team.

Salary

• Base Compensation Range: $120,000–$154,440 per year
• 25% annual bonus target, paid quarterly
• Company equity in the form of RSUs

Salary is a range for the role in the United States. Actual compensation may vary based on a candidate’s experience, skills, location, internal equity, and evolving business needs.

Benefits

• Comprehensive medical, dental, and vision coverage, with 100% employer‑paid premiums for employees and their dependents on select plans
• Company HSA, FSA, Dependent Care FSA, 401(k), and commuter benefits
• Employer‑paid life and disability insurance
• 11 observed holidays and PTO plan
• Up to 12 weeks of paid family leave
• Continuing education reimbursement

Depending on your residential location, certain laws might regulate the way Figure manages applicant data. California Residents, please review our California Employee and General Workforce Privacy Notice for further information. By submitting your application, you are agreeing and acknowledging that you have read and understand the above notice.

Figure will not sponsor work visas for this position. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.

Employment Tags

Cryptocurrency Jobs, Security Crypto Jobs, Devops Crypto Jobs, Remote Crypto Jobs, Web3 Web3 Jobs.